Question:
How can I deactivate password changing for the users.
Answer:
Within samba you can use:
samba-tool domain passwordsettings set --max-pwd-age=0
Within ldap you have to leave the “password expiry interval” empty.
The users have to change their password, in order to make this change effective.